Discuss mailing list

[Peter McCann <mccap AT freeovernetfoundation.org>]

I saw a proposal once in IETF to use randomly-mixed case queries as a way to counter DNS poisoning by off-path attackers.  Sort of like source port randomization with a few more bits.

I'm not sure what happened to that proposal in standards but maybe someone implemented it.

-Pete

On Mar 10, 2012 3:19 AM, "Amrit Panesar" <apanesar AT 4195tech.com> wrote:

unless they are flooding with /loads/ of queries I wouldn't be worried at all.

Sent from my iPhone

On Mar 9, 2012, at 17:49, Rampant Badger <badger AT rampantbadger.com> wrote:

> On Fri, Mar 9, 2012 at 5:59 PM, Peter Green <peter AT greenpete.co.uk> wrote:
>> Ok, thanks.
>>
>> I guess then that whoever is making the queries is doing it manually.
>>
>> In which case it is likely to be someone messing about?
>
> Again, I don't see that as anything other than a benign query.  What I
> meant to illustrate is that there are tools which typically convert
> queries to lower case before submitting them (e.g. your web browser)
> and others which pass them as they are handed to them (e.g. dig).
> Absent other unusual or malevolent looking aspects, the fact that the
> query has upper/lower cases isn't something I would worry about.
>
> RB